Generating PKI email accounts on a web-based email system
First Claim
Patent Images
1. A system comprising:
- a) a PKI email account website displayed on a client computer and hosted on one or more computers in a network, wherein the client computer does not store or recall PKI keys, and wherein the PKI email account website is configured to;
i) receive a PKI email account request from one or more users, wherein the PKI email account request is the only interaction required by the one or more users to create one or more PKI email accounts;
ii) generate and send a certificate signing request to a certificate authority which does not interact with the one or more users;
iii) receive and install, on the PKI email website, a certificate issued and signed by the certificate authority;
iv) store and recall one or more PKI keys without interaction from the one or more users; and
v) create the one or more PKI email accounts, wherein the one or more PKI email accounts are configured to access one or more cryptographic functions, without transmitting PKI digital keys through the network, wherein the one or more PKI email accounts are accessible to an email website, and wherein the email website is configured to read and send email messages.
4 Assignments
0 Petitions
Accused Products
Abstract
The present invention provides systems and methods for allowing an Email User to create a Public Key Infrastructure (PKI) Email Account and thereafter to digitally sign, send, verify and receive PKI encrypted emails over a computer network, such as the Internet. The systems and methods preferably include a Web-based Email System and a Certificate Authority that coordinate their actions to make the process of creating, maintaining and using the PKI Account as easy as possible for the Email User. In a preferred embodiment, a Keystore System may also be used to enhance the management and use of digital keypairs.
28 Citations
18 Claims
-
1. A system comprising:
a) a PKI email account website displayed on a client computer and hosted on one or more computers in a network, wherein the client computer does not store or recall PKI keys, and wherein the PKI email account website is configured to; i) receive a PKI email account request from one or more users, wherein the PKI email account request is the only interaction required by the one or more users to create one or more PKI email accounts; ii) generate and send a certificate signing request to a certificate authority which does not interact with the one or more users; iii) receive and install, on the PKI email website, a certificate issued and signed by the certificate authority; iv) store and recall one or more PKI keys without interaction from the one or more users; and v) create the one or more PKI email accounts, wherein the one or more PKI email accounts are configured to access one or more cryptographic functions, without transmitting PKI digital keys through the network, wherein the one or more PKI email accounts are accessible to an email website, and wherein the email website is configured to read and send email messages. - View Dependent Claims (3, 4, 5, 6, 7, 8, 9, 10)
-
2. A method comprising the steps of:
-
a) receiving, from one or more users, a PKI email account request and an auto-renewal option selection, via a PKI email account website displayed on a client computer and hosted on one or more computers in a network, wherein the client computer does not store or recall PKI keys and wherein the PKI email account request is the only interaction required by the one or more users to create one or more PKI email accounts; b) generating and storing a key pair, without interaction from the one or more users, in a data storage on the one or more computers in the network; c) requesting a first certificate from a certificate authority which does not interact with the one or more users; d) receiving the first certificate issued and signed by the certificate authority; e) installing the first certificate on the PKI email account website; f) creating the one or more PKI email accounts for the one or more users, wherein the one or more PKI email accounts are configured to access one or more cryptographic functions, without transmitting PKI digital keys through the network, wherein the one or more PKI email accounts are accessible to an email website, and wherein the email website is configured to read and send email messages; and g) requesting and receiving a second certificate from the certificate authority, without interaction from the user or a key store system, prior to the first certificate expiring. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17, 18)
-
Specification